PRIVACY POLICY
Last updated: May 2026
1. General Information
The protection of personal data is important to us. We process personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), as well as this Privacy Policy.
This Privacy Policy informs you about which personal data is processed when you visit this website and when you contact us, for what purposes this processing takes place, and which rights data subjects have.
2. Controller
The controller responsible for data processing on this website is:
Alexander Graziano
Mallorca Event Design – an offering by Alexander Graziano
Carrer Sant Bartomeu 69
07600 Llucmajor
Illes Balears
Spain
Email: hola@mallorca-eventdesign.com
Phone: +34 697 794 808
3. Data Protection Officer
A Data Protection Officer has not been appointed, as there is currently no legal obligation to do so.
4. Hosting
This website is operated through external service providers.
Depending on the technical setup, the following providers may be used in particular:
– Showit / WordPress
– webgo GmbH, Wendenstrasse 8–12, 20097 Hamburg, Germany
When you visit this website, personal data required for the operation, security and technical provision of the website may be processed by the respective hosting provider.
This may include in particular the following data:
– IP address
– date and time of the request
– browser type and browser version
– operating system used
– referrer URL
– hostname of the accessing device
– pages and files accessed
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website.
Where required, data processing agreements have been concluded with the service providers used.
5. Server Log Files
When this website is accessed, information is automatically collected and stored in so-called server log files.
This data is used for technical security, error analysis and the stability of the website. This data is not combined with other data sources.
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the secure and uninterrupted operation of the website.
Server log data is stored only for as long as necessary for the respective purpose, unless statutory retention obligations or legitimate interests require longer storage.
6. Contact via Form, Email or Phone
If you contact us via contact form, email or phone, we process the data you provide in order to handle your enquiry.
This may include in particular:
– name
– email address
– phone number, if provided
– event date
– event location
– type of event
– requested services
– content of the enquiry
The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, insofar as the enquiry is aimed at entering into or performing a contract. In other cases, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in processing and responding to enquiries.
The data submitted as part of the contact request will only be stored for as long as necessary to process the enquiry. Longer storage will only take place if statutory retention obligations exist or if the data is required for the establishment, exercise or defence of legal claims.
7. Booking and Order Processing
If you enquire about or book a service from Mallorca Event Design, we process the personal data required to prepare, carry out and process the respective order.
This may include in particular:
– name and contact details
– billing details
– event date and event location
– booked services
– individual wishes, personalisations or design details
– communication related to the booking
The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures and for the performance of a contract.
Where statutory retention obligations exist, in particular tax and commercial retention obligations, further storage is carried out on the basis of Art. 6 para. 1 lit. c GDPR.
8. Personalisation and Individual Designs
As part of our services, personalised elements may be created, for example lettering, names, initials, logos, seating plans or individual design details.
The data submitted for this purpose will be processed exclusively for the creation, coordination and implementation of the booked services.
The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If logos, graphics or other files are provided to us, they will only be used for the agreed purpose and will not be passed on to third parties without consent, unless this is necessary for the implementation of the booked service.
9. Contact via WhatsApp
A WhatsApp button or WhatsApp link may be integrated on our website, allowing you to contact us directly.
The provider of this service is:
WhatsApp Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
If you contact us via WhatsApp, we process your phone number, your name if provided, the content of your message and any files you may send in order to handle your enquiry.
The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, insofar as the enquiry is aimed at entering into or performing a contract. In other cases, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing a fast and simple communication channel for interested parties and customers.
When you click on the WhatsApp link, you will be redirected to WhatsApp. Personal data, in particular your IP address and technical information, may be transmitted to WhatsApp. We have only limited influence over this data processing by WhatsApp.
It cannot be ruled out that WhatsApp also processes personal data in third countries, in particular the USA.
Further information on data processing by WhatsApp can be found in WhatsApp’s Privacy Policy.
10. Cookies and Consent Management
Our website uses cookies and similar technologies.
Cookies are small text files that are stored on your device. Some cookies are technically necessary in order to provide the website and enable certain functions. Other cookies may be used for analytics or marketing purposes.
Technically necessary cookies are processed on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technically error-free and user-friendly provision of the website.
Where non-essential cookies, in particular for analytics or marketing purposes, are used, this is done exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.
You can withdraw or adjust your consent at any time with effect for the future via the cookie or consent tool used on this website.
Consent tool used:
CookieHub
Further information on the cookies used, their storage duration and the respective providers can be found in the cookie settings on this website.
11. Google Analytics
If you have given your consent, this website uses Google Analytics, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors use our website so that we can improve our offer and user experience.
In particular, the following data may be processed:
– IP address
– user behaviour on the website
– pages accessed
– time spent on the website
– device and browser information
– approximate location
– technical access data
The processing is carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.
The information collected by Google Analytics may be transferred to Google servers in third countries, in particular the USA, and processed there.
You can withdraw your consent at any time with effect for the future via the cookie settings on this website.
12. Social Media and Instagram
Links to our Instagram profile or content from Instagram may be embedded on this website.
If you click on an Instagram link or load embedded content, a connection to the servers of Instagram or Meta may be established. Personal data, in particular technical access data, may be transmitted to Meta.
The provider is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
We have only limited influence over the data processing carried out by Meta. Further information can be found in the Privacy Policy of Instagram or Meta.
13. Recipients of Personal Data
Personal data is only passed on where this is necessary for the provision of the website, the processing of enquiries, the performance of booked services, communication, compliance with legal obligations or the protection of legitimate interests.
Recipients or categories of recipients may include in particular:
– hosting service providers
– email service providers
– communication service providers, e.g. WhatsApp
– providers of analytics and consent management tools
– technical service providers
– tax advisors or accounting service providers
– where applicable, service providers required for the implementation of booked services
Where required, data processing agreements have been concluded with service providers.
14. Transfers to Third Countries
Where services from providers are used that process personal data outside the European Union or the European Economic Area, this is done only in compliance with the applicable legal requirements.
For individual services, in particular WhatsApp, Meta or Google, the processing of personal data in third countries, especially the USA, cannot be ruled out.
15. Storage Duration
We store personal data only for as long as necessary for the respective purpose.
Longer storage will take place if statutory retention obligations exist or if further storage is required for the establishment, exercise or defence of legal claims.
16. Rights of Data Subjects
Data subjects have the following rights within the scope of the applicable legal provisions:
– right of access to stored personal data
– right to rectification of inaccurate or incomplete data
– right to erasure of personal data
– right to restriction of processing
– right to object to processing
– right to data portability
– right to withdraw consent with effect for the future
– right not to be subject to a decision based solely on automated processing, provided that the legal requirements are met
To exercise these rights, you may contact us at any time:
Alexander Graziano
Mallorca Event Design – an offering by Alexander Graziano
Email: hola@mallorca-eventdesign.com
17. Right to Lodge a Complaint with a Supervisory Authority
Data subjects have the right to lodge a complaint with a data protection supervisory authority.
In Spain, the competent authority is in particular:
Agencia Española de Protección de Datos
AEPD
Alternatively, a complaint may also be lodged with a data protection supervisory authority at the place of habitual residence, place of work or place of the alleged infringement.
18. Automated Decision-Making / Profiling
Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place via this website.
19. SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
An encrypted connection can be recognised by the fact that the browser’s address bar begins with “https://”.
20. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy so that it complies with current legal requirements or reflects changes to our services on the website.
The current Privacy Policy applies to each subsequent visit.
